CVE-2026-1764: Localsearch: tracker-miners: gnome localsearch mp3 extractor: heap buffer overflow leads to denial of service or information disclosure when parsing mp3 files

Description

A flaw was found in GNOME localsearch (previously known as tracker-miners) MP3 Extractor. When processing specially crafted MP3 files containing ID3v2.4 tags, a missing bounds check in the `extract_performers_tags` function can lead to a heap buffer overflow. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by triggering a read of unmapped memory. In some cases, it could also lead to information disclosure by reading visible heap data.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:H

Attack vector

Local

Complexity

Low

Privileges

Low

User interaction

Required

Confidentiality

Low

Integrity

None

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)0.2% · higher than 11% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

RH

Red Hat Enterprise Linux 10 · Red Hat

All versions, or not specified · source: vendor

RH

Red Hat Enterprise Linux 8 · Red Hat

All versions, or not specified · source: vendor

RH

Red Hat Enterprise Linux 9 · Red Hat

All versions, or not specified · source: vendor

EL

Enterprise Linux · Redhat

8.0; 9.0; 10.0 · source: NVD

LO

Localsearch · Gnome

All versions, or not specified · source: NVD